3 ms·

It's more than that. The ensuing thread uncovered that Symantec had exercised very lacking oversight over their partners (called Registration Authorities, or R

by agwa 10y ago

It's more than that. The ensuing thread uncovered that Symantec had exercised very lacking oversight over their partners (called Registration Authorities, or RAs) who were allowed to perform certificate validation on Symantec's behalf.

caf 10y ago
...and at least one of those RAs didn't seem to be doing any validation at all!